CVE-2026-44441

ERPNext (open-source ERP) contains an SSRF vulnerability (CVE-2026-44441) that could be exploited by an authenticated user who crafts a request to an endpoint, causing the server to initiate an HTTP call to an attacker-controlled service. Impact details in the provided docs indicate exposure via ...